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DISCLOSURE TEXT: 

An algorithm is described that reconciles a client file 
system to its state at a specified point in time using 
incremental backup data stored on a storage-management 
server. This is accomplished by restoring selected files 
from the server to the client and by deleting selected 
files from the client file, system. After the algorithm has 
been executed, the client file system corresponds to its 
state at the desired point in time. In a typical 
embodiment, this algorithm is used in a client-server 
system. A storage-management server stores objects that 
have been backed up or archived from various client nodes. 
The server stores client data in a storage hierarchy 
consisting of various media types (e.g., disk, tape, 
optical) and uses a database for tracking the attributes 
and storage location of each client object. 

Traditionally, the client and server operate in the 
following distinct modes. In one mode of operation, the 
client and server cooperate to perform an incremental 
backup. In this operation, the client examines a file 
system and sends to the server a copy of each file that has 
not previously been backed up to the server or that has 
been modified since the last backup. For each file received 
during an incremental backup, the server stores the file in 
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its storage hierarchy and also stores meta-data about that 
file in its database. Incremental backup allows each 
individual file to be cataloged by the server and allows 
any or all such files to be restored to the server. 
However, incremental backup and restore can be inefficient 
because each. file must be processed individually by both 
the client and the server. This inefficiency can be 
problematic during a restore of an entire file system, 
since critical time may be lost as each file is restored 
individually. In an alternate mode of operation, the client 
and server may perform an image backup. In this operation, 
the client creates an image of the entire file system and 
sends this image to the server as a single object. If the 
entire file system must be restored to the client, the 
server can send the file system image and the client then 
processes this image to re-create the file system as it 
existed at the time the image was created. Image backup and 
restore operations are efficient because handling of 
individual files is greatly reduced. However, any changes 
to the file system after the image was created will not be 
reflected in the restored file system. In a typical 
embodiment of this invention as described below, 
incremental and image backup and restore operations are 
combined to achieve certain benefits of both operating 
modes. Specifically, the invention involves restoring a 
file system image and then reconciling the restored file 
system so that it matches its state at a specified point in 
time. This approach affords much of the efficiency inherent 
in an image restore while still allowing the file system to 
be restored to the state in which it existed at some point 
in time subsequent to image creation. The following general 
steps can be used for restoring a file system to its state 
at a specified point in time, using both image and 
incremental backup data residing on a storage management 
server. A user invokes a client program to request that a 
file system be restored to its state at some date and time, 
called toDate. 

The client contacts the server and requests a lis t of 
image backups that have been stored for this client's file 
system, along with the date on which each image was 
created. The server obtains this information from its 
database and sends it to the client. After receiving a list 
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of images with their creation dates, the client selects the 
image with the latest creation date prior to toDate. The 
creation date and time of the selected image is hereafter 
called fromDate. The client restores the selected image 
from the server and uses this image to re-create the file 
system as it existed at fromDate. 

The client sends a reconcile query to the server, which 
is a request for information regarding changes to the 
client file system (files added, modified, or deleted) 
after fromDate but before toDate. The server responds to 
the reconcile query using data obtained during incremental 
file backups that were performed before and after fromDate. 
For every file that was added or modified between fromDate 
and toDate, the server sends a message to the client 
indicating that a specific file version should be restored; 
the indicated file version corresponds to the file that 
existed in the file system at toDate. For every file that 
was deleted between fromDate and toDate, the server sends a 
message to the client indicating that the file should be 
deleted, since the file did not exist in the client file 
system at toDate. 

The client reconciles the file system to its stat e at 
toDate by performing the indicated restore or delete 
operation for every restore message or delete message 
received from the server. The crux of this invention 
involves step 6 above, entailing the algorithm used by the 
server in response to a reconcile query to identify file 
system changes made between fromDate and toDate. Following 
is a detailed description of how the server does this. The 
server depends on regular incremental backups to ensure 
that it has current file backups at any point in time. The 
reconcile-query algorithm uses several pieces of data that 
are routinely available for each file version that has been 
incrementally backed up to the server. 

filename - The fully qualified name of the file in t he 
client's file system. insDate - The date and time on which 
this version of the file was inserted into the server's 
database during incremental file backup. deacDate - The 
date and time at which the version was deactivated on the 
server. A file version is active when it is first backed up 
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to the server (deacDate is set to infinity) . Subsequently, 
the file version becomes inactive during an incremental 
backup if (1) the file has been deleted from the client 
file system, or (2) a more recent version of the file is 
backed up because the file has been modified in the client 
file system since the last backup. 

In response to a reconcile query in step 6 above, the 
server first scans the database entries for inactive backup 
objects belonging to the specified file system. For each 
filename, the following steps are performed. Set state 
variables f oundAtFromDate and f oundAtToDate to False. If an 
inactive version is found for which insDate > fromDate (the 
version is not included in the image) AND insDate < toDate 
AND deacDate > toDate (the version existed at toDate) then 
send a restore message to the client for this object. If an 
inactive version is found for which insDate < fromDate AND 
deacDate > fromDate then set f oundAtFromDate = True. 

If an inactive version is found for which insDate < 
toDate AND deacDate > toDate then set f oundAtToDate = True. 
If the last inactive entry for the filename is found AND 
the algorithm has not already sent a restore message for 
this filename AND f oundAtFromDate = True AND f oundAtToDate 
= False then check for an active version of this filename. 
If no active object is found for which insDate < toDate 
then send a delete message to the client for this filename. 
The server then scans the database entries for every active 
backup object belonging to the specified client file 
system. If an active object is found for which insDate > 
fromDate AND insDate < toDate then send a restore message 
to the client for this object. 

SECURITY: Use, copying and distribution of this data is 
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